What is meant by deployment server and what does it do?
Thank you for the reply gcusello
Hi @sekhar123,
Read the documentation and implement a lab to fully understand the advantages using the Forwarder Management feature using a Deployment Server.
let me know if I can help you more, or, please, accept one answer for the other people of Community.
Ciao and happy splunking
Giuseppe
P.S.: Karma Points are appreciated 😉
Hi
if you already have any CI/CD system up and running you could it instead of setting up DS.
Currently the biggest issues with DS are:
But if you haven’t already working system, you should use it.
r. Ismo
Hi @sekhar123,
as you can read at https://docs.splunk.com/Documentation/Splunk/9.0.5/Updating/Aboutdeploymentserver , a Deployment Server is a role that assume Splunk Enterprise in complex architectures.
Starting from the beginning:
it permits to push configurations to Universal and Heavy Forwarders in centralized way avoiding to access each of them one by one for each configuration update.
It can reside in a Splunk Server shared with other roles if it has to manage less than 50 clients, otherwise a dedicated server is required.
It's a full Splunk Enterprise installation without using the features of indexing and searching, but only Forwarder Management.
I hint to analyze it because it's a fondamental role in each Splunk architecture, as you can read at https://www.splunk.com/en_us/pdfs/tech-brief/splunk-validated-architectures.pdf
Ciao.
Giuseppe